June 2007
Welcome to June's edition of Internet Security News, the monthly risks bulletin detailing the
latest Internet software and system vulnerabilities from NTA Monitor, a leading IT security testing
company. It provides a convenient way to keep up to date with the fast changing world of IT security;
this month's edition includes a total of 10 risk issues:
2 High, 1 Medium, 1 Low and 6 Informational .
Microsoft's May patches
(
High risk)
Microsoft has issued patches for seven critical vulnerabilities in its latest Patch Tuesday
1st June 2007
Read More
Multiple Mac OS X flaws fixed
(
High risk)
Multiple Mac OS X flaws have been fixed, some of which could permit the exposure of sensitive information, DoS attacks or data manipulation
1st June 2007
Read More
Multiple vulnerabilities found in Cisco's IOS FTP
(
Medium risk)
Multiple vulnerabilities have been found in Cisco's IOS FTP server, successful exploitation of which could result in an attacker bypassing security, launching a DoS attack or gaining system access
1st June 2007
Read More
Sun Microsystems DoS vulnerability
(
Low risk)
A DoS vulnerability has been found in Solaris, Sun's UNIX OS, which is caused by an integer signedness error
1st June 2007
Read More
Google AdWords hacked
(
Informational)
Google has admitted that its AdWords service has been hijacked by hackers looking to spread malware
1st June 2007
Read More
Junior doctor applicants' details accessible by all
(
Informational)
Following two security lapses, the Medical Training Application Service (MTAS) site was taken offline at the beginning of May
1st June 2007
Read More
MoD satellite hacked by British hackers
(
Informational)
A Ministry of Defence satellite has been hacked by a group of British hackers
1st June 2007
Read More
NTA's latest report says IT security has improved
(
Informational)
NTA Monitor's 2007 Annual Security Report has revealed that 32% of UK organisations tested had critical vulnerabilities that are widely known and actively exploited by hackers, compared to 61% in 2006, indicating that companies have improved their security posture in the last year
1st June 2007
Read More
Online visa application unsecured for a year
(
Informational)
The online visa application website for Indian citizens wishing to travel to the UK was left insecure for a year, exposing up to 50,000 people's details
1st June 2007
Read More
Use of weak encryption allowed TJX theft
(
Informational)
TJX recently revealed that over 45 million of its customers' card details had been stolen but wasn't sure how - until now
1st June 2007
Read More
This bulletin is produced as a by-product of ongoing research carried out to develop NTA Monitor's Internet security
testing service, Regular Monitor. NTA are a full-service Internet security testing company with a comprehensive range of
testing services including: